Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/mKOk8z_StprekYBmmlmaluh1lto.roa
File: mKOk8z_StprekYBmmlmaluh1lto.roa (raw, json)
Hash identifier: NqEwfCvVktEwil+Z7Cro9N+yFBiFkkssEnEbHpXGQnA=
Subject key identifier: 98:A3:A4:F3:3F:D2:B6:9A:DE:91:80:66:9A:59:9A:96:E8:75:96:DA
Certificate issuer: /CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Certificate serial: 078780
Authority key identifier: 52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/mKOk8z_StprekYBmmlmaluh1lto.roa
Signing time: Thu 27 Jan 2022 09:26:28 +0000
ROA not before: Thu 27 Jan 2022 09:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 195.64.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493440 (0x78780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Validity
Not Before: Jan 27 09:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98a3a4f33fd2b69ade9180669a599a96e87596da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:97:79:ec:80:56:67:2a:06:87:38:55:e4:
a8:b5:57:e1:bf:1d:04:03:cb:71:bd:69:e7:9b:73:
08:97:40:ed:39:00:5d:3b:de:e8:7f:b5:c0:ce:c7:
90:60:c4:ee:76:1c:8a:5e:19:ef:93:d0:bb:18:c3:
90:11:77:5f:29:81:e0:4d:a7:e9:aa:1d:9b:93:08:
e7:6b:67:de:e4:2a:94:fa:28:c3:8b:7f:d3:78:82:
80:e1:4e:75:a7:9f:92:86:26:01:0f:f7:cb:a3:c0:
da:4f:88:4e:1c:c8:34:e9:75:ed:52:96:0e:08:de:
8b:9e:5f:6f:91:20:9c:33:83:1d:24:c4:44:6b:1e:
40:32:04:f5:4c:41:bd:3d:12:63:ff:8a:d8:31:e8:
29:aa:57:40:74:29:bd:62:28:4c:3b:86:fe:51:14:
64:94:51:c7:aa:86:f6:be:38:c9:5f:bb:f1:68:94:
32:80:49:b7:f0:3d:56:57:ee:e3:16:33:bd:f0:9f:
10:09:8e:d6:bc:2b:28:7c:8c:58:c1:43:e0:72:e9:
6d:fc:a8:95:b0:70:7b:d0:c0:48:3e:d6:3f:08:64:
90:1e:34:bf:d1:5d:34:46:1c:f9:dc:77:47:44:29:
e9:16:82:f9:87:3f:57:a9:60:44:ad:6f:3e:2c:8e:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:A4:F3:3F:D2:B6:9A:DE:91:80:66:9A:59:9A:96:E8:75:96:DA
X509v3 Authority Key Identifier:
keyid:52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/mKOk8z_StprekYBmmlmaluh1lto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7f:92:c1:e1:5a:be:04:c6:14:5e:27:b3:8b:56:93:b1:40:
5e:7d:cc:0b:2f:66:92:d4:04:83:82:6e:56:53:d4:82:78:2e:
5f:60:a6:75:52:42:e2:57:ec:02:bd:e9:f1:48:6f:b9:e7:88:
32:55:fe:c5:9d:2d:43:52:aa:f8:9f:07:76:2a:43:c1:0e:b7:
58:2f:b5:67:3d:08:f2:54:c2:2c:50:53:32:e5:3f:85:0f:76:
f1:73:70:b7:02:88:86:a1:94:a3:5c:a9:f3:00:f4:1c:04:a6:
61:23:f0:b4:3c:01:5b:c4:b9:2c:fe:86:59:42:07:2b:70:72:
19:88:61:c6:a7:e2:90:18:f9:11:73:c1:84:b0:a0:f2:f5:a4:
85:35:21:82:56:2c:f0:e0:74:57:40:06:b7:95:74:10:59:1c:
aa:4f:7b:ce:3b:5a:28:7f:e0:97:50:b9:56:37:8c:a6:c7:57:
f6:40:57:bb:fa:7d:af:c4:19:0d:c5:c0:00:59:8a:b5:88:72:
de:20:49:c3:5b:43:ee:3b:38:74:d9:86:08:31:a4:25:30:86:
80:f1:ca:19:1a:19:62:5d:34:d5:3f:b7:13:63:e1:22:75:5d:
fb:06:df:83:62:34:19:ad:ff:66:aa:15:1d:8b:f1:f9:17:f3:
3f:cc:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:24 2024 by rpki-client on console-fra.rpki-client.org